Data protection

Thank you for visiting the MVV GmbH website. We take the protection of you personal data very seriously. We comply with all current privacy and data protection legislation and guarantee the safety of all data transferred to us in accordance with relevant data protection laws and regulations.

We only collect Personal Data that is actively and voluntarily transmitted to us (e. g. for mobile or online ticketing, when applying for a customer card, participating in a sweepstake, or ordering from the MVV online shop) – we do not process any other Personal Data via the MVV website. Personal Data include, without limitation, email addresses, names, addresses, and phone numbers. The Personal Data transmitted is not passed on to any third parties unless necessary for the purpose it was originally transmitted. Unless stipulated otherwise in the following, the Personal Data is used exclusively for the purpose it was collected for. We guarantee that your Personal Data will not be used for advertising. We do not use any automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR.

Where the processing of Personal Data is based on consent (Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR), you have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before withdrawal in accordance with data protection legislation (Art. 7 GDPR, .Section 51 German Federal Data Protection Act (BDSG)).

You have the right to access the Personal Data concerning you (Art. 15 GDPR) and a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or to the restriction of processing (Art. 18 GDPR) or a right to object to the processing (Art. 21 GDPR) and a right to data portability (Art. 20 GDPR) in accordance with data protection legislation.

For the purpose of optimisation, this website uses technologies of etracker GmbH and Matomo to collect and store data. This data may be used to generate pseudonymised usage profiles. For this purpose, cookies may be used. Cookies are small text files that are stored locally in the temporary storage of your web browser when you visit a website. Cookies allow websites to remember your web browser. The data collected using etracker technologies will not be used to personally identify a visitor to the website or matched with any Personal Data of the person behind the pseudonym unless the data subject has separately given consent. You can object to the collection and storage of data at any time with effect for the future. For objections to etracker, please click here; for Matomo, please click here. If you delete the cookies in the settings menu of your browser, you will also delete the objection cookie. To deactivate data collection and storage, you will have to object to data collection and storage again.

Below you will find a list of special regulations that apply to certain services and offers provided by MVV GmbH. By using these services or offers or checking the respective boxes (opt-in), you as the user explicitly consent to your data being used as follows:

1. Shop

MVV GmbH processes the data transmitted by a customer when placing the order for the purpose of processing this order. The legal basis for processing is Art. 6 (1) lit b GDPR. The recipients of this data are the employees of MVV GmbH responsible for processing the order. In accordance with commercial law regulations, the data will be deleted after a period of ten years. If this data is not provided, conclusion of a contract will not possible.

To issue a customer card, the data submitted by the customer in his or her online application will be processed. This data is (where marked with *) required for issuance of a customer card, which is, in turn, mandatory for travelling on the student & apprentice fare. If this data is not provided, the product cannot be made available.

The Personal Data entered when completing the application form for a student & apprentice fare customer card is processed exclusively by employees of MVV GmbH for the purpose of the review, creation, printout, and postage of customer cards for student & apprentice fare as well as the validation of relevant state compensation payments and for sales statistics (number of items only) The legal basis for processing is Art. 6 (1) lit b GDPR; processing is required to fulfil a contract or for pre-contractual measures.

The data will be stored for as long as it is required for the purpose indicated; as a rule, the data will be deleted two years after the card was issued.

4. Suggestions/Contact Form

Data transmitted to MVV GmbH when sending a suggestion or a complaint is processed to handle the matter and is stored and evaluated in anonymised form for the purpose of quality assurance. The data is processed by employees of MVV GmbH. When the suggestion or complaint has to be forwarded to the transportation company affected for handling or clarification, the Personal Data submitted will be forwarded to the respective company, too. The user explicitly consents to this. The legal basis for processing is Art. 6 (1) lit a GDPR (consent). If this data is not provided, complaints or any other matters cannot be processed.

To protect against spam, MVV GmbH employs Google Inc.’s (“Google”) reCAPTCHA service. This service includes sending to Google your IP address and, if required, other data requested by Google for its reCAPTCHA service. Different data protection rules apply for the Google corporation. For more information on Google Captcha’s data protection guidelines, see www.google.com/policies/privacy/.

If required, matters brought to our attention without using the contact form will also be forwarded to the transportation companies affected for handling or clarification; again, the Personal Data submitted will be forwarded, too.

As a rule, this data will be deleted twelve months after processing.

5. Ordering Information Material

When ordering MVV brochures on the internet, the data submitted by the person placing the order will be processed by employees of MVV GmbH to handle the order. The legal basis for processing is Art. 6 (1) lit f GDPR. The legitimate interest of MVV GmbH, the transportation companies, and relevant stakeholders in public transport is the distribution of information material (free of charge) to increase the number of people using public transport instead of other means of transportation. If this data is not provided, it will not be possible to place an order. The data will be deleted two months after the material was sent.

6. MVV Partner Platform

The MVV Partner Platform is a data exchange platform for employees of transportation companies and relevant stakeholders in public transport. The data entered during registration is used by employees of MVV GmbH for verification during registration and features related to the MVV platform. The data is not processed for any other purposes. The data is not passed on to any third parties unless necessary for the purpose it was originally transmitted. The legal basis for processing is Art. 6 (1) lit f GDPR. The legitimate interest of MVV GmbH, relevant stakeholders in public transport, and the transportation companies is the smooth communication of information relevant for employees of transportation companies and relevant stakeholders in public transport as well as MVV GmbH in their day-to-day business. The Personal Data of the registered person is deleted once the person has unregistered or was removed. If this data is not provided, it will not be possible to register.

7. MVV Journey Planner and MVV Cycle Planner

Other than short temporary storage for technical reasons within the framework of IP-based communication and when using one of the ticket shops to purchase MVV online tickets, no Personal Data is processed for requests via the MVV Journey Planner and the MVV Cycle Planner When using one of the ticket shops provided to purchase MVV online tickets, Personal Data is processed in accordance with the data protection guidelines applicable for the respective ticket shop. The regulations for the sale of mobile and online tickets via MVV GmbH’s ticket shop can found in Section 12 of the General Terms and Conditions of Business and Data Protection Guidelines.

For travel information and journey planning requests, the following data will be stored on the end device: a history of recently used locations, routes, and lines of transport, settings made, downloads (e. g. orientation maps, network maps, and timetable pages), server content received (map sections, travel information), and cookies required for technical reasons as specified below.

For secure operation, calculations made within the framework of electronic journey planning (departures, travel information, etc.) are logged on the journey planner servers. These logs exclusively track the calculations made and comply with MVV GmbH’s data protection guidelines No Personal Data is transmitted or stored; it is not possible to identify a user or a request pattern.

If the user enters an email address, it will only be stored temporarily for technical reasons and will automatically be deleted once the travel information was sent; it will not be processed for any other purpose. The legal basis for processing is Art. 6 (1) lit f GDPR with the intention of providing our users with improved access to public transport.

MVV Journey Planner and MVV Cycle Planner use cookies. Cookies allow for the recognition and temporary storage of information including language settings or a preference for our mobile journey planning portal. In addition, the cookies set optimise the processing of your travel information requests within our server infrastructure. No Personal Data is collected or passed on when doing so.

To improve the quality of our Journey Planner, MVV GmbH and/or IT service providers also generate anonymous usage statistics. The sole purpose of these statistics is product improvement. They do not contain any Personal Data.

The Matomo application is used to generate visitor statistics. Matomo uses cookies to differentiate between individual users. For this purpose, your IP address is shortened to such a length that it is no longer possible to use the usage data to identify you as a person. The anonymous data is stored on our servers for occasional usage analyses that help improve our online platforms. If you do not consent, you can choose from several options: In your web browser settings menu, you can delete cookies, prevent the setting of cookies, or use a feature known as “do not track”, which we will comply with, of course. Instead of changing your browser settings, you can also object to Matomo processing your usage data on our online platforms. You can click this linkto create an opt-out cookie, which will deactivate Matomo on our pages. Please note: If you delete cookies in the settings menu of your browser, you might also delete the objection cookie. To deactivate data collection and storage, you will again have to object to data collection and storage.

In MVV’s mobile journey planning portal, you can use your location for travel information requests. To use this feature, you have to explicitly consent to the usage of location services in your browser. This data will be used to identify waypoints on your routes as well as stops, stations, and upcoming departures in your vicinity. Location data will not be stored permanently or passed on to third parties.

8. MVV Journey Planner for Your Website

Based on the information provided by you, a code is developed to allow for the integration of the MVV Journey Planner into your website. This data is not stored permanently, but will be deleted after your request was completed. There is no Personal Data involved in this process, seeing as this process does not store any IP addresses, for example.

9. Job Applications, Unsolicited Applications

All documents sent to us within the framework of a job application process will be reviewed to decide on further use. The legal basis for processing is Art. 6 (1) lit b GDPR; such processing is required for pre-contractual measures. Six months after the applicant was declined, they will be deleted (paper documents will be shredded) unless agreed upon otherwise.

10. Online Surveys

The data you submit is used for the sole purpose of the respective project. The data is not passed on to any third parties. It is rendered anonymous before processing, and it is not possible for us to identify individuals. Once the project has been completed, the raw data will be deleted, and it is no longer possible to identify individuals in any way.

11. Sweepstakes and Other One-Off Promotions

The Personal Data transmitted by participants is processed by employees of MVV GmbH for the sole purpose of running or following up on sweepstakes or promotions. It is not passed on to any third parties or provided to any third parties for them to use. Different regulations may apply. See terms of participation of the individual sweepstakes or promotions. Participants explicitly consent to MVV GmbH publishing their names and places of residence if they win a prize. The legal basis for processing is Art. 6 (1) lit a GDPR (consent). All Personal Data will be deleted after the completion of the sweepstake and the corresponding follow-up, which, as a rule, will be after two weeks. If this data is not provided, it will not be possible to participate in a sweepstake or promotion.

12. Newsletter Subscription

MVV GmbH uses the data transmitted by you for the sole purpose of mailing the newsletter. The data is not passed on to any third parties. The data is rendered anonymous and used by employees of MVV GmbH for the sole purpose of statistically analysing newsletter mailings. The legal basis for processing is Art. 6 (1) lit a GDPR (consent). Once you unsubscribe from the newsletter, your data will be deleted. If this data is not provided, it will not be possible to send out the newsletter.

13. MVV Flirt

MVV Flirt allows users to place a wanted ad on the website of Münchner Verkehrs- und Tarifverbund and the associated MVV Flirt Facebook page . Any and all data entered including gender, time of flirt, transportation line, station/stop, message, and email address will be checked and approved by employees of MVV GmbH before being published and stored on MVV Flirt and the MVV Flirt Facebook page for a period of 60 days, unless the user decides to delete the entry sooner by clicking on the “delete” link. After 60 days, the entire set of data will automatically be deleted from our systems and the MVV Flirt Facebook page.

Responses sent via MVV Flirt are not stored or read by MVV GmbH. MVV GmbH only counts the number of responses sent in reply to an individual entry. The reason for this, among other things, is to prevent spam.

Controller and Data Protection Officer

The Controller within the meaning of data protection law is MVV GmbH, represented by its management board. You can contact the management board via email info@mvv-muenchen.de or via posted mail addressed to MVV GmbH, Geschäftsführung, Thierschstraße 2, 80538 Munich, Germany.

Right to Lodge a Complaint

In accordance with Art. 77 GDPR and without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider the processing of Personal Data relating to you to be in violation of the General Data Protection Regulation.